deny.toml
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements. See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership. The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License. You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied. See the License for the
# specific language governing permissions and limitations
# under the License.
[graph]
all-features = true
[output]
feature-depth = 1
[advisories]
git-fetch-with-cli = true
unmaintained = "workspace"
[licenses]
# ASF category A licences seen in the dependency tree.
allow = [
"Apache-2.0",
"Apache-2.0 WITH LLVM-exception",
"BSD-2-Clause",
"BSD-3-Clause",
"BSL-1.0",
"CDLA-Permissive-2.0",
"ISC",
"MIT",
"Unicode-3.0",
"Zlib",
]
confidence-threshold = 0.8
# tiny-keccak (CC0-1.0) comes in through arrow-rs: ahash -> const-random.
exceptions = [{ name = "tiny-keccak", allow = ["CC0-1.0"] }]
[licenses.private]
ignore = false
[bans]
highlight = "all"
multiple-versions = "warn"
wildcards = "deny"
[sources]
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
unknown-git = "deny"
unknown-registry = "deny"